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CLAIMS : 

What is claimed is: 

1. A method for restricting access to inf ormation, 
5 said method comprising: 

receiving a request from a requestor, said 
request associated with a plurality of request levels of a 
corresponding plurality of dimensions; and 

comparing each of the plurality of request levels 
10 with each of a corresponding set of security levels. 

2. The method of claim 1, further comprising: 
retrieving the set of security levels from a 

plurality of sets of security levels, wherein each of the 
15 plurality of sets of security levels are associated with at 
least one requestor, 

3. The method of claim 1, further comprising: 
generating a query for the request with the 

20 request levels, wherein each of the plurality of request 
levels are equal or exceed each of the corresponding set of 
security levels; and 
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generating a query with at least one of the 
security levels, wherein at least one of the security 
levels exceeds a corresponding one of the request levels. 

5 4. The method of claim 1, wherein the request is 

associated with one or more request constraints, and 
further comprising: 

retrieving one or more security constraints; and 
comparing each of the request constraints to a 
10 corresponding one of the security constraints. 



5. The method of claim 4, further comprising: 

generating the query wherein each of the request 
constraints is equivalent to the corresponding one of the 
15 security constraints; and 

denying the request, wherein one of the request 
constraints is different from the corresponding one of the 
security constraints. 



6. The method of claim 1, further comprising: 

determining whether the requestor is in a 
restricted group; 
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wherein the requestor is in a restricted group, 
adding a request level to the request, wherein the added 
request level indicates that the requestor is in the 
restricted group; and 
5 wherein the requestor is in an unrestricted 

group, adding request levels to the request, wherein the 
added request level indicates that the requestor is in the 
unrestricted group. 

10 7. The method of claim 6, further comprising: 

determining one or more measures associated with 
the request; 

selecting a stargroup associated with each of the 
one or more measures associated with the request, wherein 
15 the stargroup further comprises one or more stars; 
and 

comparing each of the requested levels and the 
added levels to a corresponding plurality of aggregate 
levels associated with the stars. 

20 

8. A computer readable medium for storing a 
plurality of instructions for restricting access to 
information, said plurality of instructions comprising: 
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receiving a request from a requestor, said 
request associated with a plurality of request levels of a 
corresponding plurality of dimensions; and 

comparing each of the plurality of request levels 
5 with each of a corresponding set of security levels. 

9. The computer readable medium of claim 8, wherein 
the plurality of instructions further comprising: 

retrieving the set of security levels from a 
10 plurality of sets of security levels, wherein each of the 
plurality of sets of security levels are associated with at 
least one requestor. 

10. The computer readable medium of claim 8, wherein 
15 the plurality of instructions further comprising: 

generating a query for the request, wherein each 
of the plurality of request levels are equal or exceed each 
of the corresponding set of security levels; and 

generating a query with at least one of the 
20 security levels, wherein at least one of the security 
levels exceeds a corresponding one of the request levels. 
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11. The computer readable medium of claim 8, wherein 
the request is associated with one or more request 
constraints, and the plurality of instructions further 
comprising: 

5 retrieving one or more security constraints; and 

comparing each of the request constraints to a 
corresponding one of the security constraints. 

12. The computer readable medium of claim 11, wherein 
10 the plurality of instructions further comprising: 

generating the query wherein each of the request 
constraints is equivalent to the corresponding one of the 
security constraints; and 

denying the request, wherein one of the request 
15 constraints is different from the corresponding one of the 
security constraints. 

13. The computer readable medium of claim 8, wherein 
the plurality of instructions further comprising: 

20 determining whether the requestor is in a 

restricted group; 

wherein the requestor is in a restricted group, 
adding a request level to the request, wherein the added 
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request level indicates that the requestor is in the 
restricted group; and 

wherein the requestor is in an unrestricted 
group, adding request levels to the request, wherein the 
added request level indicates that the requestor is in the 
unrestricted group, 

14, The computer readable medium of claim 13, wherein 
the plurality of instructions further comprising: 

determining one or more measures associated with 
the request; 

selecting a stargroup associated with each of the 
one or more measures associated with the request, wherein 
the stargroup further comprises one or more stars; and 

comparing each of the requested levels and the 
added levels to a corresponding plurality of aggregate 
levels associated with the stars. 
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